Browse CVEs

HIGH 7.8 CVE-2024-40655 In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background d… Android Patch available Fix from $1,9502024-09-11 HIGH 7.8 CVE-2024-40657 In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This … Android Patch available Fix from $1,9502024-09-11 HIGH 7.8 CVE-2024-40658 In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local esc… Android Patch available Fix from $1,9502024-09-11 HIGH 7.8 CVE-2024-40662 In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation … Android Patch available Fix from $1,9502024-09-11 MEDIUM 5.5 CVE-2024-40656 In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. T… Android Patch available Fix from $1,6002024-09-11 MEDIUM 5.5 CVE-2024-40659 In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by up… Android Patch available Fix from $1,6002024-09-11 HIGH 7.0 CVE-2024-23716 In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privil… Android Mitigation only Fix from $1,9502024-09-11 HIGH 8.8 CVE-2024-7970 Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 128.0.6613.119+ Fix from $1,9502024-09-03 HIGH 8.8 CVE-2024-8362 Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 128.0.6613.119+ Fix from $1,9502024-09-03 MEDIUM 6.7 CVE-2024-20086 In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002024-09-02 MEDIUM 6.7 CVE-2024-20087 In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002024-09-02 HIGH 8.8 CVE-2024-8194 Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 128.0.6613.113+ Fix from $1,9502024-08-28 HIGH 8.8 CVE-2024-8198 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potential… Chrome 128.0.6613.113+ Fix from $1,9502024-08-28 HIGH 8.8 CVE-2024-8193 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potential… Chrome 128.0.6613.113+ Fix from $1,9502024-08-28 CRITICAL 9.6 CVE-2024-7971 KEVEPSS 21% Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium … Chrome 128.0.2739.42 / 128.0.6613.84+ Fix from $2,3002024-08-21 HIGH 8.8 CVE-2024-7966 Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to per… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7967 Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7968 Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI inte… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7969 Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7972 Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory acce… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7973 Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafte… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7974 Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 7.8 CVE-2024-7977 Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 7.8 CVE-2024-7979 Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 7.8 CVE-2024-7980 Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7964 Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7965 KEVEPSS 19% Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 128.0.2739.42 / 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 7.8 CVE-2024-32927 In sendDeviceState_1_6 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege … Android Mitigation only Fix from $1,9502024-08-19 MEDIUM 5.9 CVE-2024-32928 The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential man-in-the-m… Nest Mini Firmware Mitigation only Fix from $1,6002024-08-19 HIGH 7.8 CVE-2024-31333 In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502024-08-15